CVE-2025-11938 ChurchCRM setup.php deserialization

A vulnerability was found in ChurchCRM up to 5.18.0. This vulnerability affects unknown code of the file setup/routes/setup.php. Performing a manipulation of the argument DBPASSWORD/ROOTPATH/URL results in deserialization. The attack may be initiated remotely. The attack's complexity is rated as...

CVE-2025-11938

A vulnerability was found in ChurchCRM up to 5.18.0. This vulnerability affects unknown code of the file setup/routes/setup.php. Performing a manipulation of the argument DBPASSWORD/ROOTPATH/URL results in deserialization. The attack may be initiated remotely. The attack's complexity is rated as...

ChurchCRM 代码问题漏洞

ChurchCRM is ChurchCRM open source an open source CRM system for churches. ChurchCRM 5.18.0 and earlier versions exist deserialization vulnerability , the vulnerability stems from the file setup/routes/setup.php in the parameter DBPASSWORD/ROOTPATH/URL in the receipt of user-submitted serialized...

EUVD-1999-0863

Malware in sbrugna...

EUVD-2005-0460

Malware in sbrugna...

EUVD-2005-2326

Malware in sbrugna...

EUVD-2002-0883

Malware in sbrugna...

EUVD-2019-0363

Malware in sbrugna...

EUVD-2002-1988

Malware in sbrugna...

EUVD-2002-2069

Malware in sbrugna...

EUVD-2019-9571

Malware in sbrugna...

EUVD-2017-10135

Malware in sbrugna...

EUVD-2003-1079

Malware in sbrugna...

EUVD-1999-0672

Malware in sbrugna...

EUVD-2017-0261

Malware in sbrugna...

EUVD-2006-4894

Malware in sbrugna...

EUVD-2013-2507

Malware in sbrugna...

EUVD-2002-1987

Malware in sbrugna...

EUVD-2002-2226

Malware in sbrugna...

SUSE SLES15: tomcat11 / tomcat11-admin-webapps / tomcat11-doc / etc (SUSE-SU-2025:02979-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:02979-1 advisory. Updated to Tomcat 11.0.9 - CVE-2025-52520: Fixed integer overflow can lead to DoS for some unlikely configurations o...