CVE-2025-47663 – Mojoomla Hospital Management System Unrestricted File Upload Vulnerability

May 27, 2025

CVE ID : CVE-2025-47663

Published : May 23, 2025, 1:15 p.m. | 4 days ago

Description : Unrestricted Upload of File with Dangerous Type vulnerability in mojoomla Hospital Management System allows Upload a Web Shell to a Web Server. This issue affects Hospital Management System: from 47.0(20 through 11.

Severity: 9.9 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-47670 – miniOrange WordPress Social Login and Register PHP Remote File Inclusion Vulnerability

Next Article CVE-2025-47660 – Codexpert, Inc WC Affiliate Deserialization of Untrusted Data Object Injection Vulnerability

Highlights

CVE-2025-2851 – GL.iNet RPC Handler Buffer Overflow

April 26, 2025

CVE ID : CVE-2025-2851

Published : April 26, 2025, 8:15 a.m. | 3 hours, 49 minutes ago

Description : A vulnerability classified as critical has been found in GL.iNet GL-A1300 Slate Plus, GL-AR300M16 Shadow, GL-AR300M Shadow, GL-AR750 Creta, GL-AR750S-EXT Slate, GL-AX1800 Flint, GL-AXT1800 Slate AX, GL-B1300 Convexa-B, GL-B3000 Marble, GL-BE3600 Slate 7, GL-E750, GL-E750V2 Mudi, GL-MT300N-V2 Mango, GL-MT1300 Beryl, GL-MT2500 Brume 2, GL-MT3000 Beryl AX, GL-MT6000 Flint 2, GL-SFT1200 Opal, GL-X300B Collie, GL-X750 Spitz, GL-X3000 Spitz AX, GL-XE300 Puli and GL-XE3000 Puli AX 4.x. Affected is an unknown function of the file plugins.so of the component RPC Handler. The manipulation leads to buffer overflow. It is recommended to upgrade the affected component.

Severity: 8.0 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Top 10 Use Cases of Vibe Coding in Large-Scale Node.js Applications

Cloudsmith launches ML Model Registry to provide a single source of truth for AI models and datasets

Kong Acquires OpenMeter to Unlock AI and API Monetization for the Agentic Era

Microsoft Graph CLI to be retired

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

ASUS built a desktop gaming PC around a mobile CPU — it’s an interesting, if flawed, idea

Hollow Knight: Silksong arrives on Xbox Game Pass this week — and Xbox’s September 1–7 lineup also packs in the horror. Here’s every new game.

The Xbox remaster that brought Gears to PlayStation just passed a huge milestone — “ending the console war” and proving the series still has serious pulling power

Magento (Adobe Commerce) or Optimizely Configured Commerce: Which One to Choose

Magento (Adobe Commerce) or Optimizely Configured Commerce: Which One to Choose

Updates from N|Solid Runtime: The Best Open-Source Node.js RT Just Got Better

Scale Your Business with AI-Powered Solutions Built for Singapore’s Digital Economy

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

‘Cronos: The New Dawn’ was by far my favorite experience at Gamescom 2025 — Bloober might have cooked an Xbox / PC horror masterpiece

ASUS built a desktop gaming PC around a mobile CPU — it’s an interesting, if flawed, idea

Hollow Knight: Silksong arrives on Xbox Game Pass this week — and Xbox’s September 1–7 lineup also packs in the horror. Here’s every new game.

CVE-2025-47663 – Mojoomla Hospital Management System Unrestricted File Upload Vulnerability

CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation

Pennsylvania Attorney General’s Office Recovers from Ransomware Attack

CVE-2025-7327 – Google Reviews for WordPress Directory Traversal Vulnerability

Apple Patches Zero-Day in iOS 18.6.2 After Targeted Exploits Involving Malicious Image Files

CVE-2025-47183 – GStreamer Isomp4 Information Disclosure

CVE-2025-37982 – “Qualcomm Atheros Linux Kernel Memory Leak”

CVE-2025-2851 – GL.iNet RPC Handler Buffer Overflow

CVE-2025-5656 – PHPGurukul Complaint Management System SQL Injection Vulnerability

Hackers Using New QuirkyLoader Malware to Spread Agent Tesla, AsyncRAT and Snake Keylogger

The iPad Mini is on sale right now, but I love this gaming tablet more and it’s STILL $50 cheaper

CVE-2025-47663 – Mojoomla Hospital Management System Unrestricted File Upload Vulnerability

Related Posts