PT-2025-31135 · Phpgurukul · Phpgurukul Student Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Student Result Management System version 2.0 Description: The application suffers from improper session invalidation within the /srms/change-password.php component. This flaw enables attackers to perform session hijacking...

CVE-2025-50486

CVE-2025-50486 affects PHPGurukul Car Rental Project, version 3.0. The vulnerability is due to improper session invalidation in the /carrental/update-password.php component, enabling session hijacking. Documented impact indicates potential control of a user session with high confidentiality impac...

CVE-2025-50485

CVE-2025-50485 : PHPGurukul Online Course Registration v3.1 exposes an improper session invalidation in the /crm/change-password.php component, enabling session hijacking. The vulnerability is confirmed across multiple sources, describing inadequate session expiration/invalidation as the root cau...

CVE-2025-50484

PHPGurukul Small CRM v3.0 is affected by an improper session invalidation in the /crm/change-password.php component, enabling session hijacking. The CVE-2025-50484 description consistently cites this issue across multiple sources. The vulnerability arises from failure to terminate sessions proper...

CVE-2025-50491

CVE-2025-50491 concerns the PHPGurukul Bank Locker Management System v1, where the vulnerable component is the /banker/change-password.php module. The root cause is improper session invalidation, enabling a session hijacking attack. The CVSS 3.1 vector indicates an external attacker could trigger...

CVE-2025-50492

CVE-2025-50492 affects PHPGurukul e-Diary Management System v1, specifically the /edms/change-password.php component. The root cause is improper session invalidation, which can enable a session hijacking attack. Impact is exploitation of user sessions with high availability impact (per CVSS). Rem...

CVE-2025-50490

CVE-2025-50490 affects PHPGurukul Student Result Management System v2.0, with the vulnerable component /elms/emp-changepassword.php experiencing improper session invalidation that enables session hijacking. The issue is described across multiple sources (Red Hat, NVD, CNVD, CVE List) as a vulnera...

CVE-2025-50487

CVE-2025-50487 affects PHPGurukul Blood Bank & Donor Management System v2.4. The vulnerability resides in the change-password.php component (/bbdms/change-password.php) due to improper session invalidation, enabling session hijacking. The CVSS 3.1 base score is 7.1 (High) with network attack vect...

CVE-2025-50488

CVE-2025-50488 affects the PHPGurukul Online Library Management System v3.0 due to an improper session invalidation flaw in the /library/change-password.php component, enabling session hijacking. The incident is confirmed across multiple sources (NVD, Red Hat, CNVD, etc.) with the CVSSv3.1 base s...

CVE-2025-50494

CVE-2025-50494 affects PHPGurukul Car Washing Management System v1.0, specifically the /doctor/change-password.php component. The root cause is improper session invalidation, enabling potential session hijacking. Multiple connected sources corroborate this description and identify the vulnerable ...

CVE-2025-50493

Summary: CVE-2025-50493 affects PHPGurukul Doctor Appointment Management System v1. The vulnerability is in the /doctor/change-password.php component where improper session invalidation can lead to a session hijacking attack. Likely impact is high (CVSS v3.1: 7.5, HIGH) with network-based access ...

CVE-2025-25019

IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 does not invalidate session after a logout which could allow a user to impersonate another user on the system...

CVE-2025-33005

IBM Planning Analytics Local 2.0 and 2.1 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system...

PT-2025-23628 · Ibm · Ibm Cloud Pak For Security +1

Name of the Vulnerable Software and Affected Versions: IBM QRadar Suite Software versions 1.10.12.0 through 1.11.2.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0 Description: The issue arises because the software does not invalidate a session after a user logs out, potentially...

CVE-2025-33005

IBM Planning Analytics Local 2.0 and 2.1 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system...

CVE-2025-33005

IBM Planning Analytics Local 2.0 and 2.1 does not invalidate session after a logout which could allow an authenticated user to impersonate another user on the system...

PT-2025-23426 · Ibm · Ibm Planning Analytics

Name of the Vulnerable Software and Affected Versions: IBM Planning Analytics Local versions 2.0 through 2.1 Description: The issue allows an authenticated user to impersonate another user on the system because the session is not invalidated after a logout. Recommendations: For versions 2.0 and...

CVE-2024-21492

All versions of the package github.com/greenpau/caddy-security are vulnerable to Insufficient Session Expiration due to improper user session invalidation upon clicking the "Sign Out" button. User sessions remain valid even after requests are sent to /logout and /oauth2/google/logout. Attackers w...

CVE-2024-29070

On versions before 2.1.4, session is not invalidated after logout. When the user logged in successfully, the Backend service returns "Authorization" as the front-end authentication credential. "Authorization" can still initiate requests and access data even after logout. Mitigation: all users...

CVE-2024-28866

GoCD is a continuous delivery server. GoCD versions from 19.4.0 to 23.5.0 inclusive are potentially vulnerable to a reflected cross-site scripting vulnerability on the loading page displayed while GoCD is starting, via abuse of a redirectto query parameter with inadequate validation. Attackers...