5825 matches found
PT-2025-47163
Name of the Vulnerable Software and Affected Versions PHPGurukul Small CRM version 3.0 Description PHPGurukul Small CRM version 3.0 is susceptible to Cross Site Scripting XSS. The issue is located in the aremark parameter of the ‘manage-tickets.php’ file. Exploitation occurs through manipulation ...
CVE-2024-44648: Improper Neutralization of Special Elements used in an SQL Command
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php...
CVE-2024-44647: Improper Neutralization of Input During Web Page Generation
PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting XSS via the aremark parameter in manage-tickets.php...
CVE-2024-44641: Improper Neutralization of Special Elements used in an SQL Command
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php...
CVE-2024-44644: Improper Neutralization of Special Elements used in an SQL Command
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frmid and aremark parameters in manage-tickets.php...
CVE-2024-44647
PHPGurukul Small CRM 3.0 is vulnerable to a Cross-Site Scripting (XSS) flaw in the manage-tickets.php file. The root cause is the lack of effective filtering and escaping of user-supplied data within the aremark parameter. An attacker can exploit this by injecting a carefully crafted payload to e...
PT-2025-47164
Name of the Vulnerable Software and Affected Versions PHPGurukul Small CRM version 3.0 Description PHPGurukul Small CRM version 3.0 is susceptible to SQL Injection through the id and adminremark parameters in the 'quote-details.php' file. This allows for potential unauthorized database access or...
Explainable Transformer-Based Email Phishing Classification with Adversarial Robustness
Phishing and related cyber threats are becoming more varied and technologically advanced. Among these, email-based phishing remains the most dominant and persistent threat. These attacks exploit human vulnerabilities to disseminate malware or gain unauthorized access to sensitive information. Dee...
BackWeak: Backdooring Knowledge Distillation Simply with Weak Triggers and Fine-Tuning
Knowledge Distillation KD is essential for compressing large models, yet relying on pre-trained "teacher" models downloaded from third-party repositories introduces serious security risks -- most notably backdoor attacks. Existing KD backdoor methods are typically complex and computationally...
EUVD-2025-175403
Malicious code in zero-daemon-small-fire-pi npm...
EUVD-2025-176222
Malicious code in star-earth-small-execute-decrypt npm...
EUVD-2025-176221
Malicious code in star-permission-parse-assert-small npm...
EUVD-2025-175948
Malicious code in throw-long-stub-thread-small npm...
EUVD-2025-177760
Malicious code in moon-small-nu-rain-static npm...
EUVD-2025-177010
Malicious code in promise-user-static-small-stack npm...
EUVD-2025-176829
Malicious code in quick-serialize-small-bash-delta npm...
EUVD-2025-176372
Malicious code in simulate-small-enum-protected-cluster npm...
EUVD-2025-176329
Malicious code in small-bundle-function-minify-query npm...