CVE-2025-2362 PHPGurukul Pre-School Enrollment System contact-us.php sql injection

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/contact-us.php. The manipulation of the argument mobnum leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-2361

creationtimestamp| type| source ---|---|--- 2025-03-17 04:46:06+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7734 2025-03-17 07:46:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkknxsjcgu2x 2025-03-17 09:06:13+00:00| seen|...

CVE-2025-2361

CVE-2025-2361 affects Mercurial SCM’s Web Interface (hgweb). A cross-site scripting vulnerability arises from improper sanitization of user-controlled input passed via the cmd parameter in the Web Interface, enabling remote exploitation. Affected is Mercurial 4.5.3/71.19.145.211 with hgweb; multi...

CVE-2025-26042

Uptime Kuma == 1.23.0 has a ReDoS vulnerability, specifically when an administrator creates a notification through the web service. If a string is provided it triggers catastrophic backtracking in the regular expression, leading to a ReDoS attack...

CVE-2025-2344

creationtimestamp| type| source ---|---|--- 2025-03-16 18:46:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7719 2025-03-16 20:33:24+00:00| seen| https://t.me/cvedetector/20414 2025-03-16 21:35:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkjlu332f...

CVE-2025-2342

A vulnerability classified as critical has been found in IROAD X5 Mobile App up to 5.2.5 on Android. Affected is an unknown function of the component API Endpoint. The manipulation leads to hard-coded credentials. It is possible to launch the attack remotely. The exploit has been disclosed to the...

CVE-2025-2340

creationtimestamp| type| source ---|---|--- 2025-03-16 13:49:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7710 2025-03-16 16:22:34+00:00| seen| https://t.me/cvedetector/20409 2025-03-16 17:30:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkj65mttn...

CVE-2025-2337

creationtimestamp| type| source ---|---|--- 2025-03-16 09:50:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7708 2025-03-16 11:26:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkijshklcg26 2025-03-16 11:30:14+00:00| published-proof-of-concept|...

CVE-2025-24856

An issue was discovered in the oidc aka OpenID Connect Authentication extension before 4.0.0 for TYPO3. The account linking logic allows a pre-hijacking attack, leading to Account Takeover. The attack can only be exploited if the following requirements are met: 1 an attacker can anticipate the...

CVE-2024-58103

Square Wire before 5.2.0 does not enforce a recursion limit on nested groups in ByteArrayProtoReader32.kt and ProtoReader.kt...

CVE-2025-25871

An issue in Open Panel v.0.3.4 allows a remote attacker to escalate privileges via the Fix Permissions function...

CVE-2025-30022

CM Soluces Informatica Ltda Auto Atendimento 1.x.x was discovered to contain a SQL injection via the DATANASC parameter...

CVE-2025-30089

The CVE-2025-30089 entry applies to gurk (aka gurk-rs) up to version 0.6.3, which is reported to mishandle ANSI escape sequences. The vulnerability is described with a base CVSS v3.1 score of 5.4 (Network attack vector, high attack complexity, no privileges, no user interaction, scope Changed, Co...

CVE-2025-30077

Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.28 allows an index out-of-range panic in asn1/aper GetBitString via a zero value of numBits...

CVE-2025-26875

creationtimestamp| type| source ---|---|--- 2025-03-15 23:48:53+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114169120894617970 2025-03-16 02:09:48+00:00| seen| https://t.me/cvedetector/20390 2025-03-16 11:00:06+00:00| seen|...

CVE-2025-26921

Deserialization of Untrusted Data vulnerability in magepeopleteam Booking and Rental Manager booking-and-rental-manager-for-woocommerce allows Object Injection.This issue affects Booking and Rental Manager: from n/a through = 2.2.6...

CVE-2025-25225

A privilege escalation vulnerability in the Hikashop component versions 1.0.0-5.1.3 for Joomla allows authenticated attackers administrator to escalate their privileges to Super Admin Permissions...

CVE-2025-2263

During login to the web server in "Sante PACS Server.exe", OpenSSL function EVPDecryptUpdate is called to decrypt the username and password. A fixed 0x80-byte stack-based buffer is passed to the function as the output buffer. A stack-based buffer overflow exists if a long encrypted username or...

CVE-2025-1057

CVE-2025-1057 affects Keylime (registrar) where a change in database type handling introduced in version 7.12.0 prevents reading prior-version entries (e.g., 7.11.0) because older data is stored as bytes while the registrar now expects strings. This mismatch can trigger an error/exceptions during...

CVE-2025-1667

creationtimestamp| type| source ---|---|--- 2025-03-15 03:48:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7654 2025-03-15 04:56:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkfdky3y232m 2025-03-15 05:00:17+00:00| seen|...