19036 matches found
CVE-2025-7676
CVE-2025-7676 describes a DLL hijacking issue affecting Windows 11 for ARM64, where PE32 executables may load Base DLLs from the application directory. The underlying weakness is that ARM64 Windows loads certain DLLs from the executable’s directory, enabling code execution if an attacker can plac...
CVE-2025-7676 DLL hijacking of all PE32 executables on Windows 11 for ARM CPUs
DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture. This allows an attacker to execute code, if the attacker can plant a DLL in the same directory as the executable. Vulnerable versions of Windows 11 for ARM attempt to load Base DLLs that would ordinarily not be...
CVE-2025-7676 DLL hijacking of all PE32 executables on Windows 11 for ARM CPUs
DLL hijacking of all PE32 executables when run on Windows for ARM64 CPU architecture. This allows an attacker to execute code, if the attacker can plant a DLL in the same directory as the executable. Vulnerable versions of Windows 11 for ARM attempt to load Base DLLs that would ordinarily not be...
PHPGurukul Online Course Registration 安全漏洞
Online Course Registration is an online course registration system. A session hijacking vulnerability exists in Online Course Registration, which stems from improper session expiration of the component /crm/change-password.php. No details of the vulnerability are available at this time...
PHPGurukul Online Library Management System 安全漏洞
Online Library Management System is an online library management system. A security vulnerability exists in Online Library Management System, which originates from an improperly disabled session in the component /library/change-password.php, and can be exploited by an attacker to cause a session...
CVE-2025-50489
Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...
PT-2025-31144 · Phpgurukul · Phpgurukul Blood Bank & Donor Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Blood Bank & Donor Management System version 2.4 Description: Improper session invalidation in the component /bbdms/change-password.php allows attackers to execute a session hijacking attack. Recommendations: PHPGurukul Blood Bank ...
Microsoft Windows 11 for ARM 安全漏洞
Microsoft Windows 11 for ARM is a suite of operating systems from Microsoft Corporation USA for use in ARM architecture personal computers. A security vulnerability exists in Microsoft Windows 11 for ARM that stems from DLL hijacking could lead to code execution...
PT-2025-31148 · Unknown · Phpgurukul Car Rental Project
Name of the Vulnerable Software and Affected Versions: PHPGurukul Car Rental Project version 3.0 Description: Improper session invalidation in the /carrental/update-password.php component allows attackers to execute a session hijacking attack. Recommendations: Address the session invalidation iss...
CVE-2025-50492
CVE-2025-50492 affects PHPGurukul e-Diary Management System v1, specifically the /edms/change-password.php component. The root cause is improper session invalidation, which can enable a session hijacking attack. Impact is exploitation of user sessions with high availability impact (per CVSS). Rem...
CVE-2025-50492
Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...
CVE-2025-50486
Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...
PHPGurukul Doctor Appointment Management System 安全漏洞
Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a session hijacking vulnerability that stems from the /doctor/change-password.php component not properly terminating a session. No details of the vulnerability are...
CVE-2025-50494
CVE-2025-50494 affects PHPGurukul Car Washing Management System v1.0, specifically the /doctor/change-password.php component. The root cause is improper session invalidation, enabling potential session hijacking. Multiple connected sources corroborate this description and identify the vulnerable ...
CVE-2025-50494
Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack...
CVE-2025-50487
Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows attackers to execute a session hijacking attack...
CVE-2025-50487
Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows attackers to execute a session hijacking attack...
PT-2025-31147 · Unknown · Phpgurukul Online Course Registration System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Course Registration version 3.1 Description: Improper session invalidation in the /crm/change-password.php component allows attackers to execute a session hijacking attack. Recommendations: Address the session invalidation...