CVE-2025-4060 PHPGurukul Notice Board System category.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /category.php. The manipulation of the argument catname leads to sql injection. The attack may be initiated remotely. The exploit has bee...

CVE-2025-4060

PHPGurukul Notice Board System 1.0 is affected by a SQL injection in /category.php via the catname parameter. Multiple sources (NVD, Red Hat, CNVD/CNNVD, CVE listings, VulnDB enrichments, PT Security) describe a remote-exploit path and indicate the vulnerability can lead to accessing or manipulat...

CVE-2025-4060: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /category.php. The manipulation of the argument catname leads to sql injection. The attack may be initiated remotely. The exploit has bee...

PHPGurukul Notice Board System 注入漏洞

Notice Board System is a bulletin board system. A SQL injection vulnerability exists in the Notice Board System, which originates from the lack of validation of externally entered SQL statements in the /category.php file with the parameter catname. An attacker can exploit this vulnerability to...

PT-2025-18147 · Unknown · Phpgurukul Notice Board System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Notice Board System version 1.0 Description: A critical issue has been found in the PHPGurukul Notice Board System, affecting the file /category.php. The manipulation of the catname argument leads to SQL injection. This issue can b...

CVE-2025-43861

ManageWiki is a MediaWiki extension allowing users to manage wikis. Prior to commit 2f177dc, ManageWiki is vulnerable to reflected or stored XSS in the review dialog. A logged-in attacker must change a form field to include a malicious payload. If that same user then opens the "Review Changes"...

CVE-2022-3862

creationtimestamp| type| source ---|---|--- 2025-04-22 15:03:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12868...

PT-2025-17537

Name of the Vulnerable Software and Affected Versions: WP Simple Booking Calendar versions through 2.0.13 Description: The WP Simple Booking Calendar plugin is susceptible to a missing authorization issue. This allows unauthorized access to functionalities within the plugin. Recommendations: Upda...

SUSE CVE-2025-3522

Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally. When an email is opened, Thunderbird accesses the specified URL to determine file size, and navigates to it when the user clicks the attachment. Because the URL is not validate...

CVE-2025-30703

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...

PT-2025-16529 · Unknown · Magepeopleteam Booking/Rental Manager

Name of the Vulnerable Software and Affected Versions: magepeopleteam Booking and Rental Manager versions 2.2.8 and earlier Description: The issue is related to an improper control of filename for include/require statement in PHP programs, also known as PHP Remote File Inclusion, which allows PHP...

TOTOLINK A810R 安全漏洞

The TOTOLINK A810R is a wireless dual-band router from China's Gion Electronics TOTOLINK. The TOTOLINK A810R suffers from a command execution vulnerability that stems from the failure of the NoticeUrl parameter in the setNoticeCfg function to correctly filter constructed command special character...

Tiki Wiki CMS Groupware < 21.12, 22.0 < 24.8, 25.0 < 27.2, 28.0 < 28.3 Code Injection Vulnerability

Tiki Wiki CMS Groupware is prone to a code injection vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Mageia: Security Advisory (MGASA-2025-0133)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CGA-V6F8-V6C4-P8QH

Bulletin has no description...

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise, related to the use of an incomplete blacklist, allows attackers to circumvent security restrictions.

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of an incomplete blacklist. Exploiting this vulnerability could allow a hacker to bypass security restrictions...

RHSA-2024:8718

creationtimestamp| type| source ---|---|--- 2025-04-09 20:48:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/11163...

CGA-V7R3-37JC-PHW4

Bulletin has no description...

EsafeNet CDG 安全漏洞

EsafeNet CDG is a document security management system from EsafeNet. A security vulnerability exists in EsafeNet CDG 5.6.3.154.20520250114, which stems from improper handling of the ID parameter in updateNotice.jsp, which could lead to SQL injection...

CVE-2025-31496

creationtimestamp| type| source ---|---|--- 2025-04-07 20:46:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10784 2025-04-08 01:26:38+00:00| seen| https://t.me/cvedetector/22366...