net.optionfactory.keycloak:optionfactory-keycloak-providers (>=9.11, <=9.15), org.keycloak.testframework:keycloak-test-framework-clustering (26.7.2) +28 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.7.2)

org.keycloak:keycloak-model-storage-services MAVEN version 26.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - net.optionfactory.keycloak:optionfactory-keycloak-providers =9.11, =9....

net.optionfactory.keycloak:optionfactory-keycloak-providers (9.1), org.keycloak.testframework:keycloak-test-framework-clustering (26.5.4) +24 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.5.4)

org.keycloak:keycloak-model-storage-services MAVEN version 26.5.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - net.optionfactory.keycloak:optionfactory-keycloak-providers 9.1 -...

net.optionfactory.keycloak:optionfactory-keycloak-providers (>=8.13, <=9.0), org.keycloak.testframework:keycloak-test-framework-clustering (26.5.1) +24 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.5.1)

org.keycloak:keycloak-model-storage-services MAVEN version 26.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - net.optionfactory.keycloak:optionfactory-keycloak-providers =8.13, =9....

org.keycloak.testframework:keycloak-test-framework-clustering (26.5.0), org.keycloak.testframework:keycloak-test-framework-core (26.5.0) +23 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.5.0)

org.keycloak:keycloak-model-storage-services MAVEN version 26.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-clustering 26.5.0 -...

org.keycloak.testframework:keycloak-test-framework-core (26.1.2), org.keycloak.testframework:keycloak-test-framework-db-mariadb (26.1.2) +17 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.1.2)

org.keycloak:keycloak-model-storage-services MAVEN version 26.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-core 26.1.2 -...

org.keycloak.testframework:keycloak-test-framework-clustering (26.5.3), org.keycloak.testframework:keycloak-test-framework-core (26.5.3) +23 more potentially affected by CVE-2025-9162 via org.keycloak:keycloak-model-storage-services (26.5.3)

org.keycloak:keycloak-model-storage-services MAVEN version 26.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-model-storage-services and may be impacted: - org.keycloak.testframework:keycloak-test-framework-clustering 26.5.3 -...

CVE-2025-11503

A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown processing of the file /admin/manage-services.php. Executing a manipulation of the argument delid can lead to sql injection. The attack may be performed from remote. The exploit has...

EUVD-2025-33287

A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown processing of the file /admin/manage-services.php. Executing manipulation of the argument delid can lead to sql injection. The attack may be performed from remote. The exploit has be...

CVE-2025-11503 PHPGurukul Beauty Parlour Management System manage-services.php sql injection

A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown processing of the file /admin/manage-services.php. Executing a manipulation of the argument delid can lead to sql injection. The attack may be performed from remote. The exploit has...

CVE-2025-11503

A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown processing of the file /admin/manage-services.php. Executing a manipulation of the argument delid can lead to sql injection. The attack may be performed from remote. The exploit has...

CVE-2025-11503 PHPGurukul Beauty Parlour Management System manage-services.php sql injection

A vulnerability was determined in PHPGurukul Beauty Parlour Management System 1.1. This issue affects some unknown processing of the file /admin/manage-services.php. Executing a manipulation of the argument delid can lead to sql injection. The attack may be performed from remote. The exploit has...

CVE-2025-11503

PHPGurukul Beauty Parlour Management System 1.1 contains a SQL injection in the /admin/manage-services.php file via manipulation of the delid parameter. Multiple sources confirm remote exploitation and publicly disclosed exploit details, indicating potential data theft from the database. The vuln...

PT-2025-41307

Name of the Vulnerable Software and Affected Versions PHPGurukul Beauty Parlour Management System version 1.1 Description A flaw exists in PHPGurukul Beauty Parlour Management System 1.1 related to the processing of the /admin/manage-services.php file. Manipulation of the delid argument can resul...

PHPGurukul Beauty Parlour Management System SQL Injection Vulnerability

Beauty Parlour Management System is an application system. Beauty Parlour Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter delid in the file /admin/manage-services.php. An attacker can...

Crimson Collective: A New Threat Group Observed Operating in the Cloud

Introduction Over the past few weeks, Rapid7 has observed increased activity of a new threat group attacking AWS cloud environments with the goal of data exfiltration and subsequent extortion of the victim. This threat group refers to itself as ‘Crimson Collective’ and has recently announced that...

EUVD-2025-32764

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible descptr out-of-bounds accesses Sanitize possible descptr out-of-bounds accesses in sesenclosuredataprocess...

CVE-2023-53675

In the Linux kernel, the following vulnerability has been resolved: scsi: ses: Fix possible descptr out-of-bounds accesses Sanitize possible descptr out-of-bounds accesses in sesenclosuredataprocess...

Security Bulletin: IBM Sterling Connect:Direct Web Services vulnerable to spring-beans-6.2.3.jar (CVE-2025-41242)

Summary IBM Sterling Connect:Direct Web Services is vulnerable toPath Traversal Vulnerability in spring-beans-6.2.3. This has been addressed in new fixpacks available from Fix Central. Vulnerability Details CVEID:CVE-2025-41242 DESCRIPTION: Spring Framework MVC applications can be vulnerable to a...

Security Bulletin: IBM Sterling Connect:Direct Web Services is affected by a vulnerability in spring-security-core-6.4.3.jar (CVE-2025-41248)

Summary IBM Sterling Connect:Direct Web Services is vulnerable to Annotation detection mechanism may not correctly resolve annotations on methods in spring-security-core-6.4.3. This has been addressed in new fixpacks available from Fix Central. Vulnerability Details CVEID:CVE-2025-41248...

Security Bulletin: IBM Sterling Connect:Direct Web Services is affected by a vulnerability in spring-core-6.2.3.jar (CVE-2025-41249)

Summary IBM Sterling Connect:Direct Web Services is vulnerable to Annotation detection mechanism may not correctly resolve annotations on methods in spring-core-6.2.3. This has been addressed in new fixpacks available from Fix Central. Vulnerability Details CVEID:CVE-2025-41249 DESCRIPTION: The...