CVE-2025-3829 PHPGurukul Men Salon Management System sales-reports-detail.php sql injection

A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack...

PHPGurukul Men Salon Management System 注入漏洞

PHPGurukul Men Salon Management System is a men's salon management system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Men Salon Management System, which originates from a SQL injection due to incorrect manipulation of the parameter fromdate/todate in file...

CVE-2025-3829

creationtimestamp| type| source ---|---|--- 2025-04-19 21:56:35+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114366860108376362 2025-04-20 17:02:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12618 2025-04-20 18:48:53+00:00| seen|...

CVE-2025-32389 NamelessMC Vulnerable to SQL Injections in /user/messaging and /panel/users/reports Pages

NamelessMC is a free, easy to use & powerful website software for Minecraft servers. Prior to version 2.1.4, NamelessMC is vulnerable to SQL injection by providing an unexpected square bracket GET parameter syntax. Square bracket GET parameter syntax refers to the structure...

CVE-2024-42189

HCL BigFix Web Reports might be subject to a Denial of Service DoS attack, due to a potentially weak validation of an API parameter...

CVE-2024-42200

HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting XSS attack, due to a potentially weak validation of user input...

Stable Channel Update for ChromeOS / ChromeOS Flex

M-135, ChromeOS version 16209.50.0 Browser version 135.0.7049.104, has rolled out to ChromeOS devices on the Stable channel. If you find new issues, please let us know one of the following ways: 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta Specific...

CVE-2025-20236

creationtimestamp| type| source ---|---|--- 2025-04-16 18:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349133435273045 2025-04-16 20:14:24+00:00| seen| https://t.me/cvedetector/23135 2025-04-17 03:18:34+00:00| seen|...

CVE-2025-32867

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxapuhb7d2u 2025-04-16 20:48:38+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349605970206139 2025-04-16 21:54:55+00:00| seen|...

CVE-2025-32859

creationtimestamp| type| source ---|---|--- 2025-04-16 18:44:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmxapswj3t2z 2025-04-16 20:48:36+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114349605703951184 2025-04-16 21:55:12+00:00| seen|...

CVE-2025-22104

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex dumps, the buffer was cast to an 8 byte long and printed using string formatters. If the buffer size was not a multiple of 8 then a read buffe...

CVE-2025-22081

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bit systems On 32bit systems the "off + sizeofstruct NTFSDE" addition can have an integer wrapping issue. Fix it by using sizeadd...

CVE-2025-22104 ibmvnic: Use kernel helpers for hex dumps

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex dumps, the buffer was cast to an 8 byte long and printed using string formatters. If the buffer size was not a multiple of 8 then a read buffe...

CVE-2025-22104 ibmvnic: Use kernel helpers for hex dumps

In the Linux kernel, the following vulnerability has been resolved: ibmvnic: Use kernel helpers for hex dumps Previously, when the driver was printing hex dumps, the buffer was cast to an 8 byte long and printed using string formatters. If the buffer size was not a multiple of 8 then a read buffe...

CVE-2024-42193

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle MITM attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized acces...

CVE-2024-42193

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle MITM attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized acces...

CVE-2024-42193

CVE-2024-42193 refers to a weakness in SSL certificate validation in the HCL BigFix Web Reports service. The connected Nessus entry (KB0120585) ties this to affected HCL BigFix Server versions: 10.0.x before 10.0.13 and 11.x before 11.0.4, indicating a MITM risk and potential unauthorized access ...

CVE-2024-42193 HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle MITM attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized acces...

CVE-2024-42193 HCL BigFix Web Reports is susceptible to a Man-In-The-Middle (MITM) attack

HCL BigFix Web Reports' service communicates over HTTPS but exhibits a weakness in its handling of SSL certificate validation. This scenario presents a possibility of man-in-the-middle MITM attacks and data exposure as, if exploited, this vulnerability could potentially lead to unauthorized acces...

CVE-2024-42200

HCL BigFix Web Reports might be subject to a Stored Cross-Site Scripting XSS attack, due to a potentially weak validation of user input...