CVE-2025-10603

PHPGurukul Online Discussion Forum 1.0 is affected in /admin/admin_forum/search_result.php. Manipulating the Search parameter leads to SQL injection; the vulnerability is remotely exploitable and has publicly disclosed exploits. Connected sources corroborate the file and the injection vector, wit...

PHPGurukul Online Discussion Forum SQL注入漏洞

Online Discussion Forum is an online forum. Online Discussion Forum suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Search in the file /admin/adminforum/searchresult.php. An attacker can exploit this...

CVE-2025-4688

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

CVE-2025-4688 SQLi in BGS Interactive's SINAV.LINK Exam Result Module

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

CVE-2025-4688

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

CVE-2025-4688

CVE-2025-4688 describes an SQL injection in BGS Interactive SINAV.LINK Exam Result Module (versions before 1.2). The vulnerability stems from improper neutralization of special elements in SQL commands, enabling unauthorized database access with high impact (CVE score: CVSSv3.1 9.8, network attac...

CVE-2025-4688 SQLi in BGS Interactive's SINAV.LINK Exam Result Module

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in BGS Interactive SINAV.LINK Exam Result Module allows SQL Injection. This issue affects SINAV.LINK Exam Result Module: before 1.2...

CVE-2023-53286 RDMA/mlx5: Return the firmware result upon destroying QP/RQ

In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5: Return the firmware result upon destroying QP/RQ Previously when destroying a QP/RQ, the result of the firmware destruction function was ignored and upper layers weren't informed about the failure. Which in turn could...

BGS Interactive SINAV.LINK Exam Result Module SQL注入漏洞

BGS Interactive SINAV.LINK Exam Result Module is a system component of BGS Interactive that manages exam results. A SQL injection vulnerability exists in BGS Interactive SINAV.LINK Exam Result Module versions prior to 1.2, which stems from improper neutralization of a special element and could le...

PT-2025-37913

Name of the Vulnerable Software and Affected Versions: SINAV.LINK Exam Result Module versions prior to 1.2 Description: An improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability exists in the SINAV.LINK Exam Result Module. This issue allows for SQL...

PHPGurukul Student Result Management System 安全漏洞

Student Result Management System Using PHP is a student result management system. A cross-site request forgery vulnerability exists in Student Result Management System Using PHP, which stems from a Profile Page that does not adequately validate that a request is coming from a trusted user, no...

Online Fire Reporting System SQL注入漏洞

Online Fire Reporting System is an online fire reporting system developed by Carlo Montero, an individual developer. A SQL injection vulnerability exists in Online Fire Reporting System version 1.2, which stems from an incorrect manipulation of the parameter todate in the file...

Google Android Obfuscated Proxy Vulnerability (CNVD-2025-26792)

Google Android is a free and open source mobile operating system based on the Linux kernel, developed by Google Inc. and the Open Handset Alliance, and is mainly used for smartphones, tablets and other devices. Google Android suffers from an obfuscated proxy vulnerability that originates from...

CVE-2025-32346

In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-32346

In onActivityResult of VoicemailSettingsActivity.java, there is a possible work profile contact number leak due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-32346

CVE-2025-32346 pertains to VoicemailSettingsActivity.java in Android, where a confused deputy allows disclosure of work profile contact numbers, enabling local escalation of privilege with no additional privileges and no user interaction required. The connected documents reiterate the same root c...

Apache Tomcat 10.1.0-M1 < 10.1.44 Denial of Service

The version of Apache Tomcat installed on the remote host is 9.0.0-M1 prior to 9.0.108, 10.1.0-M1 prior to 10.1.44 or 11.0.0-M1 prior to 11.0.10. It is, therefore, affected by a denial of service vulnerability due to Tomcat's HTTP/2 implementation vulnerable to the made you reset attack. Note tha...

CVE-2025-0086

In onResult of AccountManagerService.java, there is a possible way to overwrite auth token due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

📄 Student Result Management System 2.0 SQL Injection / Local File Inclusion

Student Result Management System version 2.0 suffers from unauthenticated remote SQL injection and local file inclusion vulnerabilities. Exploit Title: Student Result Management System v2.0 Unauthenticated SQL Injection / Local File Inclusion Date: 2025-08-22 Exploit Author: Mehmet Can Kadıoğlu...

CVE-2025-38556

In the Linux kernel, the following vulnerability has been resolved: HID: core: Harden s32ton against conversion to 0 bits Testing by the syzbot fuzzer showed that the HID core gets a shift-out-of-bounds exception when it tries to convert a 32-bit quantity to a 0-bit quantity. Ideally this should...