GHSA-QW57-7CX6-WVP7

creationtimestamp| type| source ---|---|--- 2025-06-25 18:06:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19499...

CVE-2024-31481

creationtimestamp| type| source ---|---|--- 2025-06-24 15:47:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19369...

CVE-2023-35955

creationtimestamp| type| source ---|---|--- 2025-06-17 20:40:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18672...

CVE-2025-49188

creationtimestamp| type| source ---|---|--- 2025-06-17 19:39:37+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18658...

CVE-2025-49260

creationtimestamp| type| source ---|---|--- 2025-06-17 16:18:20+00:00| seen| Telegram/SCENl0bmebBo-isLeSjNn7zy-WAXbtsdyq9JC-AqVlk7Uo 2025-06-18 16:43:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18796...

CVE-2025-6097

A vulnerability was found in UTT 进取 750W up to 5.0 and classified as critical. Affected by this issue is the function formDefineManagement of the file /goform/setSysAdm of the component Administrator Password Handler. The manipulation of the argument passwd1 leads to unverified password change. T...

CVE-2025-6063

creationtimestamp| type| source ---|---|--- 2025-06-14 08:34:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18359...

CVE-2025-43579

creationtimestamp| type| source ---|---|--- 2025-06-10 19:31:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17972...

GHSA-V3PH-2Q5Q-CG88

creationtimestamp| type| source ---|---|--- 2025-06-09 21:31:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17783...

CVE-2025-5596

A vulnerability was found in FreeFloat FTP Server 1.0. It has been classified as critical. Affected is an unknown function of the component REGET Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

CVE-2024-0892

The Schema App Structured Data plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.0. This is due to missing or incorrect nonce validation on the MarkUpdate function. This makes it possible for unauthenticated attackers to update and delete...

CVE-2024-7287

A vulnerability was found in SourceCodester Establishment Billing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2024-5194

A vulnerability was found in Arris VAP2500 08.50. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /assoctable.php. The manipulation of the argument id leads to command injection. The attack can be launched remotely. The exploit has been...

CVE-2023-0332

A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file admin/manageuser.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2023-26531

Cross-Site Request Forgery CSRF vulnerability in 闪电博 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 allows Cross Site Request Forgery.This issue affects 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条: from n/a through 4.2.7...

CVE-2023-33478

RemoteClinic 2.0 has a SQL injection vulnerability in the ID parameter of /medicines/stocks.php...

CVE-2023-23950

User’s supplied input usually a CRLF sequence can be used to split a returning response into two responses...

CVE-2023-2037

A vulnerability was found in Campcodes Video Sharing Website 1.0. It has been classified as critical. This affects an unknown part of the file watch.php. The manipulation of the argument code leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to...

CVE-2023-1609

A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been rated as problematic. This issue affects the function save of the file /api/admin/store/product/save. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to...

CVE-2023-1737

A vulnerability, which was classified as critical, was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument UUSERNAME leads to sql injection. It is possible to initiate the attack remotely. The...