Aggregator

Submit #579686 / VDB-303131

Submit #579481 / VDB-309493

A vulnerability was found in PHPGurukul Online Marriage Registration System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/between-dates-application-report.php. The manipulation of the argument fromdate/todate leads to sql injection. This vulnerability is uniquely identified as CVE-2025-4927. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Submit #579468 / VDB-309492

Submit #579467 / VDB-309491

Submit #579313 / VDB-309490

A vulnerability was found in PHPGurukul Car Rental Project 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/post-avehical.php. The manipulation of the argument img1/img2/img3/img4/img5 leads to unrestricted upload. This vulnerability is handled as CVE-2025-4926. The attack may be launched remotely. Furthermore, there is an exploit available.

Submit #579462 / VDB-303132

Submit #579446 / VDB-303133

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /expense-monthwise-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injection. This vulnerability is known as CVE-2025-4925. The attack can be launched remotely. Furthermore, there is an exploit available.

Submit #579300 / VDB-309489

A vulnerability, which was classified as critical, was found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /user_void_transaction.php. The manipulation of the argument order_id leads to sql injection. This vulnerability is traded as CVE-2025-4924. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in SourceCodester Client Database Management System 1.0. This issue affects some unknown processing of the file /user_delivery_update.php. The manipulation of the argument uploaded_file_cancelled leads to unrestricted upload. The identification of this vulnerability is CVE-2025-4923. The attack may be initiated remotely. Furthermore, there is an exploit available.

Submit #579279 / VDB-303134

Submit #579234 / VDB-298818

Submit #579163 / VDB-309488

Submit #579105 / VDB-309487

Submit #579111 / VDB-309486

Submit #579104 / VDB-309485

A vulnerability classified as critical was found in Mozilla Firefox up to 138.0.3. This vulnerability affects unknown code of the component Javascript Object Handler. The manipulation leads to out-of-bounds write. This vulnerability was named CVE-2025-4920. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.