CVE-2025-34096

CVE-2025-34096 affects Easy File Sharing HTTP Server 7.2. A stack-based buffer overflow occurs in the /sendemail.ghp endpoint when an overly long Email parameter is posted, causing memory corruption and allowing unauthenticated remote code execution with server process privileges. Documentation d...

CVE-2025-34096 Easy File Sharing HTTP Server 7.2 Buffer Overflow via POST to /sendemail.ghp

A stack-based buffer overflow vulnerability exists in Easy File Sharing HTTP Server version 7.2. The flaw is triggered when a crafted POST request is sent to the /sendemail.ghp endpoint containing an overly long Email parameter. The application fails to properly validate the length of this field,...

Modeling CORS frameworks with CodeQL to find security vulnerabilities

There are many different types of vulnerabilities that can occur when setting up CORS for your web application, and insecure usage of CORS frameworks and logic errors in homemade CORS implementations can lead to serious security vulnerabilities that allow attackers to bypass authentication. What'...

DEBIAN-CVE-2025-38321

In the Linux kernel, the following vulnerability has been resolved: smb: Log an error when closeallcacheddirs fails Under low-memory conditions, closeallcacheddirs can't move the dentries to a separate list to dput them once the locks are dropped. This will result in a "Dentry still in use" error...

CVE-2025-7157

A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit has...

PT-2025-29138 · Unknown · Easy File Sharing Ftp Server

Name of the Vulnerable Software and Affected Versions: Easy File Sharing HTTP Server version 7.2 Description: A stack-based buffer overflow vulnerability exists in the application. The flaw is triggered when a crafted POST request is sent to the /sendemail.ghp endpoint containing an overly long...

EFS Easy File Sharing HTTP Server 缓冲区错误漏洞

EFS Easy File Sharing HTTP Server is a file sharing software package from EFS, Inc. A security vulnerability exists in EFS Easy File Sharing HTTP Server version 7.2 that originates from a buffer overflow in the /sendemail.ghp endpoint and could lead to the execution of arbitrary code...

CVE-2025-44960

creationtimestamp| type| source ---|---|--- 2025-07-08 19:55:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114819367034333588 2025-07-09 16:15:58+00:00| seen| https://t.me/truesecator/7211 2025-07-14 06:04:37+00:00| seen|...

CVE-2025-48802

Improper certificate validation in Windows SMB allows an authorized attacker to perform spoofing over a network...

CVE-2025-7157

A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-7157

A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-7157 code-projects Online Note Sharing login.php sql injection

A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-7157

CVE-2025-7157 affects Code-Projects Online Note Sharing 1.0. A vulnerability in /login.php arises from improper handling of the username and password parameters, enabling SQL injection. The flaw is exploitable remotely and has had exploits disclosed publicly. Multiple sources confirm the issue an...

CVE-2025-7157 code-projects Online Note Sharing login.php sql injection

A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch the attack remotely. The exploit has...

CVE-2025-7155

A vulnerability, which was classified as critical, was found in PHPGurukul Online Notes Sharing System 1.0. This affects an unknown part of the file /Dashboard of the component Cookie Handler. The manipulation of the argument sessionid leads to sql injection. It is possible to initiate the attack...

CVE-2025-7155 PHPGurukul Online Notes Sharing System Cookie Dashboard sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Online Notes Sharing System 1.0. This affects an unknown part of the file /Dashboard of the component Cookie Handler. The manipulation of the argument sessionid leads to sql injection. It is possible to initiate the attack...

Code-Projects Online Note Sharing 注入漏洞

Code-Projects Online Note Sharing is an online note sharing software from Code-Projects open source. Code-Projects Online Note Sharing version 1.0 suffers from an injection vulnerability, which stems from an incorrect manipulation of the parameters username/password in the file /login.php resulti...

PHPGurukul Online Notes Sharing System 安全漏洞

PHPGurukul Online Notes Sharing System is an online notes sharing system from PHPGurukul Inc. A security vulnerability exists in version 1.0 of the PHPGurukul Online Notes Sharing System, which stems from a SQL injection due to incorrect manipulation of the sessionid parameter in the File/Dashboa...

PT-2025-28325 · Unknown · Code-Projects Online Note Sharing

Name of the Vulnerable Software and Affected Versions: code-projects Online Note Sharing version 1.0 Description: A critical issue was found in the code, affecting an unknown function of the file /login.php. The manipulation of the username and password arguments leads to SQL injection. This issu...

PT-2025-28302 · Unknown · Phpgurukul Online Notes Sharing System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Notes Sharing System version 1.0 Description: A critical issue was found in the PHPGurukul Online Notes Sharing System, affecting an unknown part of the file /Dashboard of the component Cookie Handler. The manipulation of th...