CVE-2025-6156

PHPGurukul Nipah Virus Testing Management System 1.0 is affected by a SQL injection in /bwdates-report-ds.php triggered by manipulating the testtype parameter. Exploitation can be performed remotely; public exploit exists per multiple sources. The vulnerability originates from lack of validation ...

Exploit for CVE-2025-5964

CVE‑2025‑5964 Path Traversal PoC for M‑Files Author: By...

PHPGurukul Nipah virus Testing Management System 注入漏洞

Nipah Virus Testing Management System is an online virus diagnostic platform. The Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter testtype in the file...

CVE-2025-6157: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /registered-user-testing.php. The manipulation of the argument testtype leads to sql injection. The attack may be...

CVE-2025-6156: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bwdates-report-ds.php. The manipulation of the argument testtype leads to sql injection. The attack can be...

Exploit for CVE-2025-5287

CVE-2025-5287 PoC Unauthenticated SQL Injection exploit for...

CVE-2025-6127

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /search-report.php. The manipulation of the argument serachdata leads to cross site scripting. The attack may be...

CVE-2025-6127

PHPGurukul Nipah Virus Testing Management System 1.0 is affected by a cross-site scripting vulnerability in the /search-report.php file via the serachdata parameter. Exploitation is possible remotely and may execute arbitrary script in the victim’s browser, potentially stealing cookies or hijacki...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: pdscore: removed the write-after-free issue related to clientid. A use-after-free error was encountered during stress testing: Mon Apr 21 21:21:33 2025 BUG: KFENCE: use-after-free write at pdscauxbusdevdel+0xef/0x160 pdscore Mon...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: ipv6: Fixed soft lockups in fib6selectpath under high next hop changes. Soft lockups were observed on a cluster of Linux-based edge routers located in a highly dynamic environment. Using the bird service, these routers continuous...

PHPGurukul Nipah virus Testing Management System 代码注入漏洞

Nipah Virus Testing Management System is an online virus diagnostic platform. A cross-site scripting vulnerability exists in the Nipah Virus Testing Management System due to improper handling of the serachdata parameter in the /search-report.php file. An attacker could use this vulnerability to...

The vulnerability of the “Termide Virtual Desktops Connection Manager” software server system, related to deficiencies in the testing mechanism for integrations, allows a hacker to disclose protected information.

The vulnerability of the “Termide Virtual Desktops Connection Manager” software suite is related to deficiencies in the testing mechanisms for integrations. Exploiting this vulnerability allows a malicious actor to disclose sensitive information...

PT-2025-25566 · Unknown · Phpgurukul Nipah Virus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Nipah Virus Testing Management System version 1.0 Description: A vulnerability was found in the system, affecting some unknown functionality of the file /search-report.php. The manipulation of the serachdata argument leads to...

CVE-2025-6127: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /search-report.php. The manipulation of the argument serachdata leads to cross site scripting. The attack may be...

tidos-framework

The TIDoS Framework is an open-source, Python-based web application penetration testing framework. It is designed to cover various phases of a penetration test, including reconnaissance, scanning and enumeration, vulnerability analysis, and exploitation. The framework is built on top of the SQLit...

Exploit for Expression Language Injection in Atlassian Confluence_Data_Center

CVE-2022-26134 - Atlassian Confluence OGNL Injection RCE...

[SECURITY] Fedora 41 Update: python3.9-3.9.23-1.fc41

Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...

[SECURITY] Fedora 42 Update: python3.9-3.9.23-1.fc42

Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...

Oracle Linux 8 : .NET / 9.0 (ELSA-2025-8815)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8815 advisory. 9.0.107-1.0.1 - Add support for Oracle Linux 9.0.107-1 - Update to .NET SDK 9.0.107 and Runtime 9.0.6 - Resolves: RHEL-94422 Tenable has extracted the preceding...

📄 Mongoose HTTP Denial of Service

Mongoose HTTP versions prior to 7.14 appear to suffer from a basic resource exhaustion denial of service vulnerability. Exploit Title: Mongoose HTTP 7.14 DDOS Stack-Based Free Discovered by: Yehia Elghaly Discovered Date: 2025-06-11 Vendor Homepage: https://mongoose.ws/ Software Link :...