Lucene search
+L

18904 matches found

CNVD
CNVD
added 2025/07/30 12:00 a.m.10 views

Doctor Appointment Management System Session Hijacking Vulnerability

Doctor Appointment Management System is a doctor appointment management system. Doctor Appointment Management System suffers from a session hijacking vulnerability that stems from the /doctor/change-password.php component not properly terminating a session. No details of the vulnerability are...

7.5CVSS6.9AI score0.00318EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/07/30 12:00 a.m.11 views

Online Course Registration Session Hijacking Vulnerability

Online Course Registration is an online course registration system. A session hijacking vulnerability exists in Online Course Registration, which stems from improper session expiration of the component /crm/change-password.php. No details of the vulnerability are available at this time...

7.1CVSS7AI score0.00325EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/30 12:00 a.m.14 views

Car Rental Project Session Hijacking Vulnerability

Car Rental Project is a car rental program. Car Rental Project suffers from a session hijacking vulnerability that stems from the /carrental/update-password.php component not properly terminating a session. No details of the vulnerability are provided at this time...

7.1CVSS6.8AI score0.00325EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/07/30 12:00 a.m.16 views

e-Diary Management System Session Hijacking Vulnerability

The e-Diary Management System is an electronic diary management system. The e-Diary Management System suffers from a session hijacking vulnerability that stems from improper session invalidation of the component /edms/change-password.php. No details of the vulnerability are available at this time...

7.5CVSS6.9AI score0.00432EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/07/29 11:35 p.m.3 views

CVE-2025-43260

This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to hijack entitlements granted to other privileged apps...

5.4AI score0.00213EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/07/29 11:35 p.m.16 views

CVE-2025-43260

This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.7. An app may be able to hijack entitlements granted to other privileged apps...

0.00213EPSS
SaveExploits0References2
CVE
CVE
added 2025/07/29 11:35 p.m.40 views

CVE-2025-43260

CVE-2025-43260 affects Apple macOS Sequoia (15.6) and macOS Sonoma (14.7.7). The issue could allow an app to hijack entitlements granted to other privileged apps, representing a local-attack surface with low confidentiality/ integrity impact per the provided metrics. The vulnerability is mitigate...

5.1CVSS5.8AI score0.00213EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2025/07/28 8:17 p.m.12 views

CVE-2025-50485

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...

7.1CVSS5.8AI score0.00325EPSS
SaveExploits1References3
OSV
OSV
added 2025/07/28 8:17 p.m.13 views

CVE-2025-50486

Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS5.8AI score0.00325EPSS
SaveExploits1References3
NVD
NVD
added 2025/07/28 8:17 p.m.18 views

CVE-2025-50485

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...

7.1CVSS0.00325EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2025/07/28 8:05 p.m.632 views

Exploit for CVE-2025-34077

CVE-2025-34077 Unauthenticated Admin Session Hijack - Pie Regist...

10CVSS6.4AI score0.14307EPSS
SaveExploits7
OSV
OSV
added 2025/07/28 7:15 p.m.8 views

CVE-2025-50487

Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows attackers to execute a session hijacking attack...

7.1CVSS5.8AI score0.00263EPSS
SaveExploits1References3
OSV
OSV
added 2025/07/28 7:15 p.m.9 views

CVE-2025-50484

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS5.8AI score0.00263EPSS
SaveExploits1References3
NVD
NVD
added 2025/07/28 7:15 p.m.21 views

CVE-2025-50484

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack...

7.1CVSS0.00263EPSS
SaveExploits1References1
NVD
NVD
added 2025/07/28 7:15 p.m.12 views

CVE-2025-50487

Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows attackers to execute a session hijacking attack...

7.1CVSS0.00263EPSS
SaveExploits1References1
OSV
OSV
added 2025/07/28 6:15 p.m.9 views

CVE-2025-50491

Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...

7.1CVSS5.8AI score0.00289EPSS
SaveExploits0References3
NVD
NVD
added 2025/07/28 6:15 p.m.13 views

CVE-2025-50491

Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack...

7.1CVSS0.00289EPSS
SaveExploits0References1
NVD
NVD
added 2025/07/28 6:15 p.m.11 views

CVE-2025-50492

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

7.5CVSS0.00432EPSS
SaveExploits0References1
OSV
OSV
added 2025/07/28 6:15 p.m.8 views

CVE-2025-50492

Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack...

7.5CVSS5.8AI score0.00432EPSS
SaveExploits0References3
OSV
OSV
added 2025/07/28 6:15 p.m.10 views

CVE-2025-50489

Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack...

7.5CVSS5.8AI score0.00483EPSS
SaveExploits1References3
Rows per page
Query Builder