5181 matches found
CVE-2025-4736 PHPGurukul Daily Expense Tracker register.php sql injection
A vulnerability was found in PHPGurukul Daily Expense Tracker 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...
PHPGurukul Daily Expense Tracker Injection Vulnerability
PHPGurukul Daily Expense Tracker is a daily expense tracker from PHPGurukul. An injection vulnerability exists in version 1.1 of PHPGurukul Daily Expense Tracker, which stems from improper handling of the parameter email in the file /register.php, which could lead to SQL injection...
PHPGurukul Daily Expense Tracker System Security Vulnerability
Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. Daily Expense Tracker System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter fullname/contactnumber in the file...
PT-2025-21595 · Unknown · Phpgurukul Daily Expense Tracker
Name of the Vulnerable Software and Affected Versions: PHPGurukul Daily Expense Tracker version 1.1 Description: A critical issue affects an unknown functionality of the file /register.php. The manipulation of the email argument leads to SQL injection. The attack can be launched remotely. The...
CVE-2025-4785: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PHPGurukul Daily Expense Tracker System 1.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user-profile.php. The manipulation of the argument fullname/contactnumber leads to sql injection. The attack may be launched...
PT-2025-21666 · Unknown · Phpgurukul Daily Expense Tracker System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Daily Expense Tracker System version 1.1 Description: A critical issue was found in the system, affecting some unknown functionality of the file /user-profile.php. The manipulation of the fullname and contactnumber arguments leads ...
CVE-2025-4736: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in PHPGurukul Daily Expense Tracker 1.1 and classified as critical. Affected by this issue is some unknown functionality of the file /register.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been...
Alibaba Cloud Linux 3 : 0142: tracker-miners (ALINUX3-SA-2023:0142)
The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2023:0142 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2023-5557: A flaw was found in the tracker-mine...
GLSA-202505-10 : Tracker miners: Sandbox weakness
The remote host is affected by the vulnerability described in GLSA-202505-10 Tracker miners: Sandbox weakness A vulnerability has been discovered in Tracker minders. Please review the CVE identifier referenced below for details. Tenable has extracted the preceding description block directly from...
Tracker miners: Sandbox weakness
Background The Tracker miners are a collection of data extractors for the GNOME Tracker. Description A vulnerability has been discovered in Tracker minders. Please review the CVE identifier referenced below for details. Impact Please review the referenced CVE identifier for details. Workaround...
[SECURITY] [DSA 5918-1] varnish security update
------------------------------------------------------------------------- Debian Security Advisory DSA-5918-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 13, 2025 https://www.debian.org/security/faq -...
[SECURITY] [DLA 4162-1] redis security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4162-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk May 12, 2025 https://wiki.debian.org/LTS -...
Debian dla-4158 : fossil - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4158 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4158-1 [email protected] https://www.debian.org/lts/security/...
[SECURITY] [DLA 4157-1] request-tracker4 security update
Debian LTS Advisory DLA-4157-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón May 08, 2025 https://wiki.debian.org/LTS Package : request-tracker4 Version : 4.4.4+dfsg-2+deb11u4 CVE ID : CVE-2024-3262 CVE-2025-2545 CVE-2025-30087 Debian Bug : 1068452 1104424...
DLA-4157-1 request-tracker4 - security update
Bulletin has no description...
tracker-miners bug fix and enhancement update
An update is available for tracker-miners. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Tracker is a powerful desktop-neutral first class object database,...
CVE-2025-2545
Vulnerability in Best Practical Solutions, LLC's Request Tracker v5.0.7, where the Triple DES 3DES cryptographic algorithm is used within SMIME code to encrypt S/MIME emails. Triple DES is considered obsolete and insecure due to its susceptibility to birthday attacks, which could compromise the...
CVE-2025-47256
Libxmp through 4.6.2 has a stack-based buffer overflow in depackpha in loaders/prowizard/pha.c via a malformed Pha format tracker module in a .mod file...
CVE-2025-47256
Libxmp up to 4.6.2 is affected by a stack-based buffer overflow in depack_pha (loaders/prowizard/pha.c) triggered by a malformed Pha format tracker module in a .mod file. The exploitation is Local with no privileges required and no user interaction, with a CVSS v3.1 base score of 5.6 (Low confide...