高通GPU漏洞威胁安卓生态，撞库攻击致北面资料外泄|一周特辑
点击查看更多本周网络安全大事件。
Aggregator
CVE-2025-5668 | PHPGurukul Medical Card Generation System 1.0 /admin/readenq.php ID sql injection (EUVD-2025-17015)
6 months 1 week ago
A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/readenq.php. The manipulation of the argument ID leads to sql injection.
This vulnerability is uniquely identified as CVE-2025-5668. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-5669 | PHPGurukul Medical Card Generation System 1.0 /admin/unreadenq.php ID sql injection (EUVD-2025-17016)
6 months 1 week ago
A vulnerability classified as critical was found in PHPGurukul Medical Card Generation System 1.0. This vulnerability affects unknown code of the file /admin/unreadenq.php. The manipulation of the argument ID leads to sql injection.
This vulnerability was named CVE-2025-5669. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-5670 | PHPGurukul Medical Card Generation System 1.0 /admin/manage-card.php ID sql injection (EUVD-2025-17017)
6 months 1 week ago
A vulnerability, which was classified as critical, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processing of the file /admin/manage-card.php. The manipulation of the argument ID leads to sql injection.
The identification of this vulnerability is CVE-2025-5670. The attack may be initiated remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-5755 | SourceCodester Open Source Clinic Management System 1.0 /email_config.php email sql injection
6 months 1 week ago
A vulnerability was found in SourceCodester Open Source Clinic Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /email_config.php. The manipulation of the argument email leads to sql injection.
This vulnerability is traded as CVE-2025-5755. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-5756 | code-projects Real Estate Property Management System 1.0 /Admin/EditCity.php sql injection (EUVD-2025-17107)
6 months 1 week ago
A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/EditCity.php. The manipulation leads to sql injection.
This vulnerability is known as CVE-2025-5756. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-5757 | code-projects Traffic Offense Reporting System 1.0 /save-reported.php cross site scripting (EUVD-2025-17115)
6 months 1 week ago
A vulnerability was found in code-projects Traffic Offense Reporting System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /save-reported.php. The manipulation of the argument offence_id/vehicle_no/driver_license/name/address/gender/officer_reporting/offence leads to cross site scripting.
This vulnerability is handled as CVE-2025-5757. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-5758 | SourceCodester Open Source Clinic Management System 1.0 /doctor.php doctorname sql injection (EUVD-2025-17114)
6 months 1 week ago
A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. This affects an unknown part of the file /doctor.php. The manipulation of the argument doctorname leads to sql injection.
This vulnerability is uniquely identified as CVE-2025-5758. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
Other parameters might be affected as well.
vuldb.com
CVE-2025-5652 | PHPGurukul Complaint Management System 2.0 between-date-complaintreport.php fromdate/todate sql injection (EUVD-2025-16980)
6 months 1 week ago
A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/between-date-complaintreport.php. The manipulation of the argument fromdate/todate leads to sql injection.
This vulnerability is traded as CVE-2025-5652. It is possible to launch the attack remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-5660 | PHPGurukul Complaint Management System 2.0 register-complaint.php noc sql injection (EUVD-2025-16993)
6 months 1 week ago
A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 2.0. Affected by this issue is some unknown functionality of the file /user/register-complaint.php. The manipulation of the argument noc leads to sql injection.
This vulnerability is handled as CVE-2025-5660. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-5659 | PHPGurukul Complaint Management System 2.0 /user/profile.php pincode sql injection (EUVD-2025-16994)
6 months 1 week ago
A vulnerability classified as critical was found in PHPGurukul Complaint Management System 2.0. Affected by this vulnerability is an unknown functionality of the file /user/profile.php. The manipulation of the argument pincode leads to sql injection.
This vulnerability is known as CVE-2025-5659. The attack can be launched remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-5663 | PHPGurukul Auto Taxi Stand Management System 1.0 search-autoortaxi.php searchdata sql injection (EUVD-2025-16995)
6 months 1 week ago
A vulnerability has been found in PHPGurukul Auto Taxi Stand Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-autoortaxi.php. The manipulation of the argument searchdata leads to sql injection.
This vulnerability was named CVE-2025-5663. The attack can be initiated remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-5639 | PHPGurukul Notice Board System 1.0 /forgot-password.php email sql injection (EUVD-2025-16969)
6 months 1 week ago
A vulnerability was found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection.
This vulnerability is handled as CVE-2025-5639. The attack may be launched remotely. Furthermore, there is an exploit available.
vuldb.com
CVE-2025-5638 | PHPGurukul Notice Board System 1.0 /admin-profile.php mobilenumber sql injection (EUVD-2025-16963)
6 months 1 week ago
A vulnerability has been found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection.
This vulnerability is known as CVE-2025-5638. The attack can be launched remotely. Furthermore, there is an exploit available.
Other parameters might be affected as well.
vuldb.com
Hundreds of GitHub Malware Repos Targeting Novice Cybercriminals Linked to Single User
6 months 1 week ago
A sophisticated malware distribution campaign has weaponized over 140 GitHub repositories to target inexperienced cybercriminals and gaming cheat users, representing one of the largest documented cases of supply chain attacks on the platform. The repositories, masquerading as legitimate malware tools and game cheats, contain elaborate backdoors designed to infect users who compile the seemingly authentic […]
The post Hundreds of GitHub Malware Repos Targeting Novice Cybercriminals Linked to Single User appeared first on Cyber Security News.
Tushar Subhra Dutta
Arkana
6 months 1 week ago
You must login to view this content
cohenido
CVE-2023-51073 | Buffalo LS210D 1.78-0.03 Firmware Update Script update_notifications.sh privilege escalation
6 months 1 week ago
A vulnerability was found in Buffalo LS210D 1.78-0.03. It has been classified as critical. Affected is an unknown function of the file /etc/init.d/update_notifications.sh of the component Firmware Update Script. The manipulation leads to privilege escalation.
This vulnerability is traded as CVE-2023-51073. It is possible to launch the attack remotely. There is no exploit available.
vuldb.com
CVE-2024-22900 | Vinchin Backup & Recovery 7.2 setNetworkCardInfo command injection
6 months 1 week ago
A vulnerability classified as critical was found in Vinchin Backup & Recovery 7.2. Affected by this vulnerability is the function setNetworkCardInfo. The manipulation leads to command injection.
This vulnerability is known as CVE-2024-22900. The attack can be launched remotely. There is no exploit available.
vuldb.com
CVE-2024-24262 | ireader media-server 1.0.0 sip-uac-transaction.c sip_uac_stop_timer use after free
6 months 1 week ago
A vulnerability, which was classified as problematic, has been found in ireader media-server 1.0.0. Affected by this issue is the function sip_uac_stop_timer of the file /uac/sip-uac-transaction.c. The manipulation leads to use after free.
This vulnerability is handled as CVE-2024-24262. The attack can only be initiated within the local network. There is no exploit available.
vuldb.com
CVE-2025-31027 | Tiger Theme up to 2.0 on WordPress cross site scripting
6 months 1 week ago
A vulnerability has been found in Tiger Theme up to 2.0 on WordPress and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross site scripting.
This vulnerability was named CVE-2025-31027. The attack can be initiated remotely. There is no exploit available.
vuldb.com