CVE-2026-25205

creationtimestamp| type| source ---|---|--- 2026-04-13 05:45:59+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mje5zn6par27 2026-04-13 07:18:01+00:00| published-proof-of-concept| Telegram/WZFVHGgaKyJ7TxaSM0HnzDZsEpM2ufMQ-E7g3YgMqDv7PE...

CVE-2026-6149

creationtimestamp| type| source ---|---|--- 2026-04-13 03:17:09+00:00| seen| Telegram/NukICWx4pspraCJ3uziEkNKObfKzRFcWqJj3ldZd0bxdWP8 2026-04-13 05:35:30+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mje5gwihtq2c...

PHPGurukul Online Course Registration 安全漏洞

PHPGurukul Online Course Registration is an online course registration system provided by PHPGurukul Inc. Version 3.1 of PHPGurukul Online Course Registration contains a security vulnerability, which stems from the arbitrary file upload vulnerability present in the personal profile image upload...

CVE-2025-51414

In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page...

CVE-2025-63743

Snipe-IT web-based asset management system (v8.3.0–v8.3.1) is affected by an authenticated stored XSS: an attacker with login privileges can inject JavaScript via the Name/Surname fields, executed when the Activity Report or a profile is viewed if Display Name is not set. The issue is fixed in v8...

CVE-2025-51414

In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page...

CVE-2025-63743

Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated attacker with lowest privileges sufficient only to log in, to inject arbitrary JavaScript code via "Name" and "Surname" fields. The JavaScript code is execut...

CVE-2025-63743

Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated attacker with lowest privileges sufficient only to log in, to inject arbitrary JavaScript code via "Name" and "Surname" fields. The JavaScript code is execut...

CVE-2025-51414

In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page...

📄 ChurchCRM Cross Site Scripting

ChurchCRM versions 6.5.2 and below suffer from a persistent cross site scripting vulnerability in the person property assignment functionality. Note that the advisory says versions 6.3.0 and below are affected but the CVE entry states versions prior to 6.5.3. CVE-2025-67875: ChurchCRM has stored...

PT-2026-32514

Name of the Vulnerable Software and Affected Versions Phpgurukul Online Course Registration version 3.1 Description An arbitrary file upload issue exists within the profile picture upload functionality on the '/my-profile.php' page. Recommendations At the moment, there is no information about a...

CVE-2025-51414

Phpgurukul Online Course Registration v3.1 is affected by an arbitrary file upload vulnerability in the profile picture upload at /my-profile.php. The CVE details indicate a high-severity issue (CVSS 3.1: 8.8) with network access and low attacker/authentication requirements, enabling total impact...

CVE-2026-6130

creationtimestamp| type| source ---|---|--- 2026-04-12 23:15:15+00:00| published-proof-of-concept| Telegram/hilS-ssmivi8q1jRkIVKk8g--dsfivFEr3ZeZAGEjyA5lds 2026-04-13 02:02:23+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjdrjtah7c2r 2026-06-13 15:00:07+00:00|...

CVE-2026-40396

creationtimestamp| type| source ---|---|--- 2026-04-12 22:12:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjdepdag252o...

CVE-2026-40395

creationtimestamp| type| source ---|---|--- 2026-04-12 22:07:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjdegenak62w...

EUVD-2018-21768

Adianti Framework 5.5.0 and 5.6.0 contains an SQL injection vulnerability that allows authenticated users to manipulate database queries by injecting SQL code through the name field in SystemProfileForm. Attackers can submit crafted SQL statements in the profile edit endpoint to modify user...

CVE-2019-25697

creationtimestamp| type| source ---|---|--- 2026-04-12 14:22:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjckh7otop2x 2026-04-18 01:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mjqchavael2o...

CVE-2017-20239

creationtimestamp| type| source ---|---|--- 2026-04-12 14:02:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjcjcuu7nk23...

CVE-2018-25257 Adianti Framework 5.5.0 and 5.6.0 SQL Injection via Profile

Adianti Framework 5.5.0 and 5.6.0 contains an SQL injection vulnerability that allows authenticated users to manipulate database queries by injecting SQL code through the name field in SystemProfileForm. Attackers can submit crafted SQL statements in the profile edit endpoint to modify user...

CVE-2018-25257 Adianti Framework 5.5.0 and 5.6.0 SQL Injection via Profile

Adianti Framework 5.5.0 and 5.6.0 contains an SQL injection vulnerability that allows authenticated users to manipulate database queries by injecting SQL code through the name field in SystemProfileForm. Attackers can submit crafted SQL statements in the profile edit endpoint to modify user...