PHPGurukul Old Age Home Management System 注入漏洞

PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul. An injection vulnerability exists in PHPGurukul Old Age Home Management System version 1.0, which stems from an incorrect manipulation of the namesc parameter that can lead to SQL injection...

CVE-2025-2734: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/aboutus.php. The manipulation of the argument pagetitle leads to sql injection. It is possible to launch the attack remotely. The explo...

PT-2025-12701

Name of the Vulnerable Software and Affected Versions PHPGurukul Old Age Home Management System version 1.0 Description A critical issue affects the processing of the file /admin/manage-services.php, where the manipulation of the sertitle argument leads to SQL injection. This issue may be exploit...

PT-2025-12700

Name of the Vulnerable Software and Affected Versions PHPGurukul Old Age Home Management System version 1.0 Description A critical issue has been identified, affecting the file /admin/manage-scdetails.php. The namesc argument is vulnerable to SQL injection, which can be exploited remotely. The...

PT-2025-12699

Name of the Vulnerable Software and Affected Versions PHPGurukul Old Age Home Management System version 1.0 Description A critical issue has been found, affecting the /admin/contactus.php file. The manipulation of the pagetitle argument leads to SQL injection. This issue can be exploited remotely...

PT-2025-12702

Name of the Vulnerable Software and Affected Versions PHPGurukul Old Age Home Management System version 1.0 Description A critical vulnerability has been found in PHPGurukul Old Age Home Management System. The issue affects an unknown function of the file /admin/eligibility.php. The manipulation ...

WordPress CryoKey plugin <= 2.4 - Reflected Cross-Site Scripting via 'ckemail' Parameter vulnerability

Reflected Cross-Site Scripting via 'ckemail' Parameter vulnerability discovered by johska in WordPress Plugin CryoKey versions = 2.4...

Patch it up: Old vulnerabilities are everyone’s problems

Welcome to this week's edition of the Threat Source newsletter. Let's pick up where we left off in my last newsletter. Please mark your calendars: The free support for Windows 10 will end on October 14, 2025. When a software loses vendor support, it no longer receives patches or updates. As...

CVE-2023-37933

An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability CWE-79 in FortiADC GUI version 7.4.0, 7.2.0 through 7.2.1 and before 7.1.3 allows an authenticated attacker to perform an XSS attack via crafted HTTP or HTTPs requests...

CVE-2024-12144

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM Old System allows SQL Injection. This issue affects Finder ERP/CRM Old System: before 18.12.2024...

SUSE CVE-2025-21831

In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 commit 9d26d3a8f1b0 "PCI: Put PCIe ports into D3 during suspend" sets the policy that all PCIe ports are allowed to use D3. When the system is suspended if the port...

DEBIAN-CVE-2025-21831

In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 commit 9d26d3a8f1b0 "PCI: Put PCIe ports into D3 during suspend" sets the policy that all PCIe ports are allowed to use D3. When the system is suspended if the port...

UBUNTU-CVE-2025-21831

In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 commit 9d26d3a8f1b0 "PCI: Put PCIe ports into D3 during suspend" sets the policy that all PCIe ports are allowed to use D3. When the system is suspended if the port...

CVE-2025-21831 PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1

In the Linux kernel, the following vulnerability has been resolved: PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1 commit 9d26d3a8f1b0 "PCI: Put PCIe ports into D3 during suspend" sets the policy that all PCIe ports are allowed to use D3. When the system is suspended if the port...

CVE-2024-12144

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM Old System allows SQL Injection. This issue affects Finder ERP/CRM Old System: before 18.12.2024...

CVE-2024-12144

CVE-2024-12144 affects Finder ERP/CRM (Old System) and is caused by improper neutralization of special elements in SQL commands, enabling SQL injection. The issue applies to Finder ERP/CRM (Old System) versions before 18.12.2024. The description documents a high-severity impact (C/H/I/A) with a n...

PT-2025-9921

Name of the Vulnerable Software and Affected Versions Finder ERP/CRM Old System versions prior to 18.12.2024 Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

CVE-2024-12144: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Finder Fire Safety Finder ERP/CRM Old System allows SQL Injection. This issue affects Finder ERP/CRM Old System: before 18.12.2024...

WordPress plugin Structured Content 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabili...

SUSE CVE-2025-21813

In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix off-by-one root mis-connection Before attaching a new root to the old root, the children counter of the new root is checked to verify that only the upcoming CPU's top group have been connected to it. However...