Reddit NetSec

AlienVault OTX General

CVE Database V5

Reddit InfoSec News

Exploit-DB RSS Feed

CIRCL OSINT Feed

ThreatFox MISP Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

A weakness has been identified in alaneuler batteryKid up to 2.1 on macOS. The affected element is an unknown function of the file PrivilegeHelper/PrivilegeHelper.swift of the component NSXPCListener. This manipulation causes missing authentication. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be exploited.

CVE-2025-9815 is a high-severity vulnerability affecting the alaneuler batteryKid application versions up to 2.1 on macOS. The vulnerability stems from a missing authentication check in an unknown function within the PrivilegeHelper/PrivilegeHelper.swift file, specifically related to the NSXPCListener component. NSXPCListener is a macOS interprocess communication mechanism that allows processes to communicate securely. The missing authentication allows an attacker with local access to the host to exploit this flaw without requiring user interaction or elevated privileges beyond limited local privileges. The vulnerability enables an attacker to potentially escalate privileges or perform unauthorized actions by interacting with the PrivilegeHelper service, which likely runs with elevated permissions. The exploit code has been publicly released, increasing the risk of exploitation, although no confirmed in-the-wild attacks have been reported to date. The CVSS 4.0 base score of 8.5 reflects the high impact on confidentiality, integrity, and availability, combined with relatively low attack complexity and no user interaction required. This vulnerability is critical for environments where batteryKid is deployed on macOS systems, especially if local user accounts are shared or if untrusted users have local access.

Detailed information about CVE-2025-9815: Missing Authentication in alaneuler batteryKid affecting alaneuler batteryKid. Get real-time updates, technical detail

CVE-2025-9815: Missing Authentication in alaneuler batteryKid - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-9815: Missing Authentication in alaneuler batteryKid

A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. Impacted is an unknown function of the file /admin/contact-us.php. The manipulation of the argument mobnumber results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited.

CVE-2025-9814 is a SQL Injection vulnerability identified in version 1.1 of the PHPGurukul Beauty Parlour Management System, specifically within the /admin/contact-us.php file. The vulnerability arises from improper sanitization or validation of the 'mobnumber' parameter, which is susceptible to malicious input manipulation. An attacker can exploit this flaw remotely without any authentication or user interaction, allowing them to inject arbitrary SQL commands into the backend database queries. This can lead to unauthorized data access, data modification, or even complete compromise of the database. The CVSS 4.0 base score is 6.9, indicating a medium severity level, with the vector highlighting that the attack can be performed remotely (AV:N), requires no privileges (PR:N), no user interaction (UI:N), and has partial impact on confidentiality, integrity, and availability (VC:L, VI:L, VA:L). The vulnerability does not require any authentication, making it easier to exploit. Although no public exploit is currently known to be actively used in the wild, the exploit code has been publicly released, increasing the risk of exploitation. The affected product is a niche management system used primarily by beauty parlours, which may have limited but sensitive customer and business data stored in the database. The vulnerability's exploitation could allow attackers to extract personal customer information, manipulate appointment or contact data, or disrupt business operations by corrupting or deleting data.

Detailed information about CVE-2025-9814: SQL Injection in PHPGurukul Beauty Parlour Management System affecting PHPGurukul Beauty Parlour Management System. Ge

CVE-2025-9814: SQL Injection in PHPGurukul Beauty Parlour Management System - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-9814: SQL Injection in PHPGurukul Beauty Parlour Management System

A vulnerability was identified in Tenda CH22 1.0.0.1. This issue affects the function formSetSambaConf of the file /goform/SetSambaConf. The manipulation of the argument samba_userNameSda leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

CVE-2025-9813 is a high-severity buffer overflow vulnerability discovered in the Tenda CH22 router, specifically affecting version 1.0.0.1. The vulnerability resides in the function formSetSambaConf within the /goform/SetSambaConf endpoint. An attacker can remotely exploit this flaw by manipulating the samba_userNameSda argument, which leads to a buffer overflow condition. This type of vulnerability typically allows an attacker to overwrite memory adjacent to the buffer, potentially enabling arbitrary code execution, denial of service, or system compromise. The vulnerability is remotely exploitable without user interaction and requires low attack complexity, with no privileges or authentication needed. The CVSS 4.0 score of 8.7 reflects the critical nature of the vulnerability, emphasizing high impact on confidentiality, integrity, and availability. Although no known exploits are currently observed in the wild, a public exploit is available, increasing the risk of active exploitation. The vulnerability does not require any user interaction and can be triggered over the network, making it a significant threat to devices exposed to untrusted networks. The lack of available patches at the time of publication further exacerbates the risk for affected users. Given the nature of the vulnerability in a network device that manages Samba configurations, successful exploitation could allow attackers to gain control over the device, intercept or manipulate network traffic, or pivot into internal networks.

Detailed information about CVE-2025-9813: Buffer Overflow in Tenda CH22 affecting Tenda CH22. Get real-time updates, technical details, and mitigation strategie

CVE-2025-9813: Buffer Overflow in Tenda CH22 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-9813: Buffer Overflow in Tenda CH22

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formexeCommand of the file /goform/exeCommand. Executing manipulation of the argument cmdinput can lead to buffer overflow. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.

CVE-2025-9812 is a high-severity buffer overflow vulnerability identified in the Tenda CH22 device, specifically affecting version 1.0.0.1. The vulnerability resides in the function formexeCommand within the /goform/exeCommand endpoint. An attacker can exploit this flaw by manipulating the 'cmdinput' argument, which leads to a buffer overflow condition. This overflow can corrupt memory and potentially allow remote code execution or cause denial of service. The vulnerability is remotely exploitable without requiring user interaction or elevated privileges, making it particularly dangerous. The CVSS 4.0 score of 8.7 reflects its high impact on confidentiality, integrity, and availability, with an attack vector over the network and low attack complexity. Although no public exploits have been observed in the wild yet, the exploit code has been publicly disclosed, increasing the risk of imminent attacks. The vulnerability does not require authentication, and the scope is limited to the affected Tenda CH22 firmware version 1.0.0.1. The lack of available patches at the time of disclosure further elevates the risk for users of this device. Buffer overflow vulnerabilities in network-exposed device management interfaces are critical because they can lead to full device compromise, enabling attackers to pivot into internal networks or disrupt network services.

Detailed information about CVE-2025-9812: Buffer Overflow in Tenda CH22 affecting Tenda CH22. Get real-time updates, technical details, and mitigation strategie

CVE-2025-9812: Buffer Overflow in Tenda CH22 - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2025-9812: Buffer Overflow in Tenda CH22

A vulnerability was found in Campcodes Farm Management System 1.0. This affects an unknown part of the file /reviewInput.php. Performing manipulation of the argument rating results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used.

CVE-2025-9811 is a SQL Injection vulnerability identified in version 1.0 of the Campcodes Farm Management System, specifically within the /reviewInput.php file. The vulnerability arises due to improper sanitization or validation of the 'rating' parameter, which allows an attacker to inject malicious SQL code remotely without requiring authentication or user interaction. This flaw enables an attacker to manipulate backend database queries, potentially leading to unauthorized data access, data modification, or deletion. The CVSS 4.0 score of 6.9 classifies this as a medium severity vulnerability, reflecting the ease of remote exploitation without privileges and the potential for partial impact on confidentiality, integrity, and availability. Although no public exploits are currently known in the wild, the exploit code has been made public, increasing the risk of exploitation by threat actors. The vulnerability affects only version 1.0 of the Campcodes Farm Management System, which is a specialized software used in agricultural management to streamline farm operations and data management. Given the nature of SQL injection, attackers could leverage this vulnerability to extract sensitive farm data, manipulate operational records, or disrupt system availability, which could have cascading effects on farm productivity and supply chain reliability.

Detailed information about CVE-2025-9811: SQL Injection in Campcodes Farm Management System affecting Campcodes Farm Management System. Get real-time updates, t

Geographic Threat Map

Global Threat Distribution

Threat Levels

Recent Threats

CVE-2025-9815: Missing Authentication in alaneuler batteryKi...

CVE-2025-9814: SQL Injection in PHPGurukul Beauty Parlour Ma...

CVE-2025-9813: Buffer Overflow in Tenda CH22

CVE-2025-9812: Buffer Overflow in Tenda CH22

CVE-2025-9811: SQL Injection in Campcodes Farm Management Sy...

Country Risk Levels

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility