CVE-2025-3258: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Old Age Home Management System 1.0. This vulnerability affects unknown code of the file /search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-3235: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/profile.php. The manipulation of the argument adminname/contactnumber leads to sql injection. It is possible to initiate the attack...

WordPress Home Services plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by stealthcopter Patchstack Alliance in WordPress Theme Home Services versions = 1.2.6...

WordPress Home Services Theme <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)

Software Home Services Type Theme Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2025-26930 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID ec753abbf944 Credits stealthcopter Required privilege...

Medium: ansible-core

Issue Overview: A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home director...

Ksenia Security Lares WebServer Home Automation PIN Logic Flaw

Summary Lares is a burglar alarm & home automation system that can be controlled by means of an ergo LCD keyboard, as well as remotely by telephone, and even via the Internet through a built-in WEB server. Description The Ksenia home automation and burglar alarm system has a security flaw where t...

org.eclipse.jetty:infinispan-embedded-query (>=9.4.50.v20221201, <=11.0.13), org.eclipse.jetty:infinispan-remote-query (>=9.4.50.v20221201, <=11.0.13) +11 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (11.0.16.final)

org.infinispan:infinispan-query MAVEN version 11.0.16.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.eclipse.jetty:infinispan-embedded-query =9.4.50.v20221201, =9.4.50.v20221201, =10.0.1...

org.eclipse.jetty:infinispan-embedded-query (>=9.4.45.v20220203, <=11.0.8), org.eclipse.jetty:infinispan-remote-query (>=9.4.45.v20220203, <=11.0.8) +11 more potentially affected by CVE-2024-6875 via org.infinispan:infinispan-query (11.0.14.final)

org.infinispan:infinispan-query MAVEN version 11.0.14.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-query and may be impacted: - org.eclipse.jetty:infinispan-embedded-query =9.4.45.v20220203, =9.4.45.v20220203, =10.0.8...

KDDI HGW BL1500HM Path traversal vulnerability

The KDDI HGW BL1500HM is a home router from KDDI Japan. A path traversal vulnerability exists in KDDI HGW BL1500HM 002.002.003 and earlier versions, which originates from path traversal in the USB storage file sharing feature and could lead to obtaining or modifying files or executing arbitrary...

KDDI HGW BL1500HM Cross-site Scripting Vulnerability

The KDDI HGW BL1500HM is a home router from KDDI Japan. A cross-site scripting vulnerability exists in KDDI HGW BL1500HM 002.002.003 and earlier versions, which originates from cross-site scripting in the USB storage file sharing feature and could lead to the execution of arbitrary scripts...

KDDI HGW BL1500HM Path traversal vulnerability

The KDDI HGW BL1500HM is a home router from KDDI Japan. A path traversal vulnerability exists in KDDI HGW BL1500HM 002.002.003 and earlier versions, which stems from path traversal in the USB storage file sharing feature and could lead to the acquisition or modification of files...

KDDI HGW BL1500HM Cross-site Scripting Vulnerability

The KDDI HGW BL1500HM is a home router from KDDI Japan. A cross-site scripting vulnerability exists in KDDI HGW BL1500HM 002.002.003 and earlier versions, which originates from cross-site scripting in the nickname registration screen and could lead to the execution of arbitrary script...

CVE-2025-2740

A vulnerability classified as critical has been found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/eligibility.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2025-2738

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/manage-scdetails.php. The manipulation of the argument namesc leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-2739

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/manage-services.php. The manipulation of the argument sertitle leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-2740

A vulnerability classified as critical has been found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/eligibility.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2025-2740

A vulnerability classified as critical has been found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/eligibility.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The exploit...

CVE-2025-2737

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/contactus.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2025-2739

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/manage-services.php. The manipulation of the argument sertitle leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-2738

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/manage-scdetails.php. The manipulation of the argument namesc leads to sql injection. The attack can be initiated remotely. The...