CVE-2025-10114: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the argument Name results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

CVE-2025-10079

A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this vulnerability is an unknown functionality of the file /get-quote.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2025-10079

A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this vulnerability is an unknown functionality of the file /get-quote.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2025-10079

CVE-2025-10079 affects PHPGurukul Small CRM 4.0. The vulnerability is in the file /get-quote.php where manipulation of the contact parameter (Contact) enables a SQL injection. The issue can be exploited remotely, with exploit activity described as published and potentially usable in the wild. Doc...

CVE-2025-10079 PHPGurukul Small CRM get-quote.php sql injection

A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this vulnerability is an unknown functionality of the file /get-quote.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2025-10079 PHPGurukul Small CRM get-quote.php sql injection

A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this vulnerability is an unknown functionality of the file /get-quote.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

CVE-2025-10079: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this vulnerability is an unknown functionality of the file /get-quote.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...

PT-2025-36427

Name of the Vulnerable Software and Affected Versions PHPGurukul Small CRM version 4.0 Description A SQL injection flaw exists in PHPGurukul Small CRM version 4.0. The issue is located in the /get-quote.php file, where manipulation of the Contact argument can lead to SQL injection. This attack ca...

PHPGurukul Small CRM SQL注入漏洞

Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability, which originates from the /get-quote.php file, which does not perform security filtering on the Contact parameter. An attacker can exploit this vulnerability to illegally manipulate the...

Malicious code in yaml-assert-upsilon-sudo-small (npm)

The package yaml-assert-upsilon-sudo-small was found to contain malicious code...

MAL-2025-43842 Malicious code in coffee-small-lake (npm)

The package coffee-small-lake was found to contain malicious code...

MAL-2025-46752 Malicious code in yaml-assert-upsilon-sudo-small (npm)

The package yaml-assert-upsilon-sudo-small was found to contain malicious code...

Malicious code in coffee-small-lake (npm)

The package coffee-small-lake was found to contain malicious code...

CVE-2025-9834

A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file /registration.php. Executing manipulation of the argument Username can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and...

scsi: ufs: qcom: Only free platform MSIs when ESI is enabled

...

The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.

...

VulnCheck KEV: CVE-2022-20705

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned softwa...

Linux Distros Unpatched Vulnerability : CVE-2018-6644

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SBLIM Small Footprint CIM Broker SFCB 1.4.9 has a null pointer DoS vulnerability via a crafted POST request to the /cimom URI. CVE-2018-6644 Note that Nessus...

CVE-2025-9834

A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file /registration.php. Executing manipulation of the argument Username can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and...

CVE-2025-9834

PHPGurukul Small CRM 4.0 contains a cross-site scripting vulnerability in the registration.php file, triggered by manipulating the Username parameter. The issue is exploitable remotely and an exploit has been published. Multiple connected sources (including PT-Security and Red Hat/NVD entries) co...