Lucene search
+L

6594 matches found

OSV
OSV
added 2025/04/28 8:15 p.m.10 views

CVE-2025-45953

A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely...

9.1CVSS5.8AI score0.00422EPSS
SaveExploits1References2
NVD
NVD
added 2025/04/28 8:15 p.m.24 views

CVE-2025-45953

A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely...

9.1CVSS0.00422EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/04/28 12:0 a.m.14 views

PT-2025-18109

Name of the Vulnerable Software and Affected Versions PHPGurukul Hostel Management System version 2.1 Description A vulnerability was found in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack,...

9.1CVSS5.8AI score0.00422EPSS
SaveExploits1References10
Cvelist
Cvelist
added 2025/04/28 12:0 a.m.26 views

CVE-2025-45953

A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely...

0.00422EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/04/28 12:0 a.m.9 views

PT-2025-18112

Name of the Vulnerable Software and Affected Versions PHPGurukul User Registration & Login and User Management System version 3.3 Description A critical issue was found in the /loginsystem/change-password.php file of the user panel's Change Password component. Improper handling of session data...

9.8CVSS5.9AI score0.00499EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/04/28 12:0 a.m.16 views

PHPGurukul Hostel Management System 安全漏洞

Hostel Management System is a hostel management system. Hostel Management System has a session hijacking vulnerability that stems from improper handling of session data in the file /hostel/change-password.php, no details of the vulnerability are available at this time...

9.1CVSS6.9AI score0.00422EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/04/28 12:0 a.m.10 views

CVE-2025-45949

A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely and...

9.4AI score0.00499EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2025/04/28 12:0 a.m.13 views

CVE-2025-45953

A vulnerability was found in PHPGurukul Hostel Management System 2.1 in the /hostel/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely...

9.2AI score0.00422EPSS
SaveExploits1References1
CVE
CVE
added 2025/04/28 12:0 a.m.64 views

CVE-2025-45949

The CVE-2025-45949 entry concerns PHPGurukul User Registration & Login and User Management System v3.3. The vulnerability is in the /loginsystem/change-password.php component within the user panel, caused by improper handling of session data which enables a Session Hijacking attack. This exposes ...

9.8CVSS6.5AI score0.00499EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2025/04/28 12:0 a.m.68 views

CVE-2025-45953

CVE-2025-45953 affects PHPGurukul Hostel Management System 2.1, in /hostel/change-password.php. Improper handling of session data enables a remote session-hijacking attack. Output confirms vulnerability details; no patch/version fix information is provided in the connected documents. Monitor for ...

9.1CVSS6.5AI score0.00422EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2025/04/28 12:0 a.m.29 views

CVE-2025-45949

A critical vulnerability was found in PHPGurukul User Registration & Login and User Management System V3.3 in the /loginsystem/change-password.php file of the user panel - Change Password component. Improper handling of session data allows a Session Hijacking attack, exploitable remotely and...

0.00499EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/04/26 5:28 a.m.7 views

CVE-2025-28242

Improper session management in the /loginok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack...

9.8CVSS7.2AI score0.01805EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/26 5:26 a.m.15 views

CVE-2025-28233

Incorrect access control in BW Broadcast TX600 14980, TX300 32990 31448, TX150, TX1000, TX30, and TX50 Hardware Version: 2, Software Version: 1.6.0, Control Version: 1.0, AIO Firmware Version: 1.7 allows attackers to access log files and extract session identifiers to execute a session hijacking...

9.1CVSS7.2AI score0.00347EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/04/26 5:4 a.m.19 views

CVE-2025-28238

Improper session management in Elber REBLE310 Firmware v5.5.1.R , Equipment Model: REBLE310/RX10/4ASI allows attackers to execute a session hijacking attack...

9.8CVSS7.2AI score0.00401EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/18 6:15 p.m.20 views

CVE-2025-28242

Improper session management in the /loginok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack...

9.8CVSS0.01805EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/18 6:15 p.m.29 views

CVE-2025-28238

Improper session management in Elber REBLE310 Firmware v5.5.1.R , Equipment Model: REBLE310/RX10/4ASI allows attackers to execute a session hijacking attack...

9.8CVSS0.00401EPSS
SaveExploits0References1
NVD
NVD
added 2025/04/18 6:15 p.m.32 views

CVE-2025-28233

Incorrect access control in BW Broadcast TX600 14980, TX300 32990 31448, TX150, TX1000, TX30, and TX50 Hardware Version: 2, Software Version: 1.6.0, Control Version: 1.0, AIO Firmware Version: 1.7 allows attackers to access log files and extract session identifiers to execute a session hijacking...

9.1CVSS0.00347EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/18 12:0 a.m.12 views

BW Broadcast Transmitter Management System 安全漏洞

BW Broadcast Transmitter Management System is a transmitter network management system from BW Broadcast. A security vulnerability exists in the BW Broadcast Transmitter Management System that stems from improper access control and could lead to a session hijacking attack...

9.1CVSS6.6AI score0.00347EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/04/18 12:0 a.m.11 views

CVE-2025-28233

Incorrect access control in BW Broadcast TX600 14980, TX300 32990 31448, TX150, TX1000, TX30, and TX50 Hardware Version: 2, Software Version: 1.6.0, Control Version: 1.0, AIO Firmware Version: 1.7 allows attackers to access log files and extract session identifiers to execute a session hijacking...

7.4AI score0.00347EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/18 12:0 a.m.17 views

PT-2025-17327 · Elber · Elber Reble310

Name of the Vulnerable Software and Affected Versions: Elber REBLE310 Firmware version 5.5.1.R Description: The issue is related to improper session management, which allows attackers to execute a session hijacking attack. This can be exploited in the Elber REBLE310 equipment with the model numbe...

9.8CVSS6.6AI score0.00401EPSS
SaveExploits0References5
Rows per page
Query Builder