23422 matches found
CVE-2025-51683
CVE-2025-51683: mJobtime v15.7.2 contains a blind SQL injection in the /Default.aspx/update_profile_Server endpoint. Exploitation is unauthenticated and can lead to arbitrary SQL execution, with high impact on confidentiality, integrity, and availability. The description and sources confirm the v...
CVE-2025-51683
A blind SQL Injection SQLi vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL statements via a crafted POST request to the /Default.aspx/updateprofileServer endpoint...
CVE-2025-63533
A cross-site scripting XSS vulnerability exists in the Blood Bank Management System 1.0 within the updateprofile.php and rprofile.php components. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript...
CVE-2025-65899
creationtimestamp| type| source ---|---|--- 2025-11-30 21:00:05+00:00| published-proof-of-concept| Telegram/rRcKRxKabz2qESPpdetVuiSVozhY10EMS-voIXs0I8ELfIA 2025-12-05 02:32:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m77h2ilncl2j...
EUVD-2025-199926
A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.5. This issue affects some unknown processing of the file /user/profile of the component Image Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The...
Skuul School Management System has a Sensitive Data Exposure Vulnerability in Uploaded Images
A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.5. This issue affects some unknown processing of the file /user/profile of the component Image Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The...
CVE-2025-13785
A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.5. This issue affects some unknown processing of the file /user/profile of the component Image Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The...
CVE-2025-13785
A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.5. This issue affects some unknown processing of the file /user/profile of the component Image Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The...
Information Exposure
Overview yungifez/skuul is an A multi school management system. Affected versions of this package are vulnerable to Information Exposure via the Image Handler component in the /user/profile path. An attacker can access sensitive profile image information by sending crafted requests to this...
CVE-2025-13785
CVE-2025-13785 affects yungifez Skuul School Management System up to 2.6.5, with the Image Handler processing the /user/profile file leading to information disclosure. The vulnerability is exploitable remotely and has public exploits/disclosures; multiple connected sources confirm the component a...
CVE-2025-13785 yungifez Skuul School Management System Image profile information disclosure
A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.5. This issue affects some unknown processing of the file /user/profile of the component Image Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The...
CVE-2025-13785 yungifez Skuul School Management System Image profile information disclosure
A security vulnerability has been detected in yungifez Skuul School Management System up to 2.6.5. This issue affects some unknown processing of the file /user/profile of the component Image Handler. Such manipulation leads to information disclosure. The attack may be performed from remote. The...
Skuul school management system 访问控制错误漏洞
Skuul school management system is a school management system by the individual developer Marvellous Ifezue. An access control error vulnerability exists in Skuul School Management System version 2.6.5 and earlier, which stems from improper handling of images in the file /user/profile, which could...
CVE-2025-13683
creationtimestamp| type| source ---|---|--- 2025-11-28 18:28:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6pja42fen2u...
CVE-2025-12143
creationtimestamp| type| source ---|---|--- 2025-11-28 14:33:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6p43lltmi2s 2026-05-21 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-141-05 2026-05-24 20:13:41+00:00| seen|...
CVE-2025-66386
creationtimestamp| type| source ---|---|--- 2025-11-28 10:54:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6optmticc2x 2025-12-03 19:49:28+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3m74a3bsoik2j...
CVE-2025-13769
creationtimestamp| type| source ---|---|--- 2025-11-28 10:49:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6opkog7ez2j...
CVE-2025-66370
creationtimestamp| type| source ---|---|--- 2025-11-28 07:02:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6ocuiuwkn2k 2025-12-16 08:21:16+00:00| seen| https://seclists.org/oss-sec/2025/q4/278...